This is identity at the center. If it has anything to do with I
am this is the go-to podcast. So if you're a beginner or an
expert or anyone in between you've found your new home
welcome to Identity at the center now your host Jim
McDonald and Jeff Steadman Welcome to the identity of the
center podcast I'm Jeff and that's Jim.
Hey Jim hey Jeff, how are you not so bad yourself.
Good man, conference season starts in three, two.
One might be under way man. Type, you look here this yet.
Well it should be. I'm flying out on Saturday to
enjoy a little bit of extra time in Texas.
Going to go to a country line dancing.
What do you think of that gross? You want to go with us?
That's, that's a big unfortunately will not be there.
I will be flying in on Sunday, too.
We won't be able to make it. I've already the Gartner, I am
Summit in the u.s. so I'll be there Sunday, Sunday night,
specifically. So I I'm sorry, I will not be
able to make your your gross line.
Dancing thing. I actually had never done line
dancing. Like I can't even do like I
could never do the Macarena there.
Any of those things? Is but I do like watching people
do it. Some people are like, real
serious and get it down. Other people are just goofing
off and having fun. I think I'd have to try and play
it off. It's a goof off because I if I
got serious, I would look like a total goober.
Yeah, I would look like a full to but I have zero interest.
I'll watch it's entertaining, it's fine.
But yeah, I have no, no interest in participating I am.
Yeah, I may sit down at the table person at the party or the
wedding or whatever it may be, you know, chill relax, that kind
of thing rather than try to get up and I figure out how to make
these old bones move in a way that makes any sense whatsoever.
Yeah, well I've been we've been traveling a lot.
You've been traveling a lot more than me.
I think the conference is going to be my last business trip for
a few weeks. So I'm kind of like, like,
burning the candle at both ends, but it's kind of like this going
to be the end of the travel for a couple of weeks.
Doesn't mean I won't be working, but it actually I'm taking a
week off in the beginning of April.
And so we've pre-recorded some podcast, we've recorded one
earlier so we're all cued up, don't worry, folks will have an
episode every Monday, the hits. But I think I think the big
question you're going to bring all the recording equipment with
us to Texas. But I mean I don't know that
we're going on that. We don't have recording space.
I don't know that we'll have time to do much in the way of
recording, but it will treat our listeners will see.
Yeah, I was thinking maybe something our event, I don't
know. I'm looking at the stuff, I have
the gear sitting next to me here.
I ordered some new gear as well, was hoping to bring that with
me, but the tripods that I ordered apparently did not
arrive in time and probably will not until next week.
So now, I got to figure out if I'm going to bring the new gear,
the old gear, or some mishmash of the to, I got new microphones
that I think would be super cool for recording in person rather
than the ones we've been using, which still stands.
What? What are they look like?
Like their shotgun microphone. It's just a it's a road video.
Video mic to something like that.
It's designed to go on top of the camera but they're they're
nice and short portable shotgun microphones that are really good
at noise, rejection from anything except right in front
of it, so good for like a noisy conference area.
That's not our fate was thinking, yes, but they require
some sort of Mount. You don't just hold it in your
hand or anything like that. So my tripods did not arrive
when The in the package that I'm looking at right here.
So I got to figure out an alternative for that.
So, what's your plan for your existing gear is a are going to
sell it or just putting the closet and wait till it's like
worthless. No, they're probably still bring
with me. There are two wireless
microphones and transmitters and stuff like that, so they're good
for we have. That's what we've been using
whenever you go on site, so they're nice and portable.
They work really well. They catch a little more
background noise and I would like them to but that sort of
the Ambiance of a You know conference anyway so who cares?
But now we're getting super technical into like what what
what equipment do we use? Stuff like that fact, this like
a YouTube channel a video or something like that but now
they're still good. I'll still also use them and
figure out other ways to take advantage of that stuff.
I always thought that they're a little weird so they are really
not designed for It's not like a microphone that sits in front of
you like you would expect to see like a radio or you know
something like that. It's a wireless lapel mic that
you clip to yourself and it has the little, what they call a
dead cat on it. It's what they call.
It looks like a bobcat. Yeah.
It blocks the wind noise and stuff like that, and kind of,
you know, breezes and stuff like that.
So it's designed for that. But they do work really well for
casual podcasting and things like that.
And I kind of put together a little system that makes it look
like a handheld mic so that People have to clip it to them
and works that way. Yeah, I think what people don't
realize is like behind unless they've been on the show is like
behind the scenes. You kind of, you know, you have
to hold the mic like this and you always give him like the
physical demonstration, and then they, they mimic it.
And it's an essay, see how to record.
They forget about it and they forget, and they move their head
all around. And yeah.
Yeah. But it's, it works.
It works, it works. I don't know.
So yeah, I think this is going to be the, I don't know when
we're going to record two hours with you because We're so kick
down to fourth wall here, it's Friday evening, we're recording.
This this is going to go like Monday, right?
When the conference starts. And then you and I are going to
be busy Monday doing stuff, we're going to be busy Tuesday,
doing stuff, you leave on Wednesday and then I leave on
Thursday. So I'm not sure when actually
would have time to do any recording other than potentially
Tuesday night. I will say that you know, what
was who we've got a question coming up from a listener.
And it made me think when we first started doing this
podcast, there weren't many like, hey, it's Friday at 6:30.
Let's record the podcast, but we've done this a few times,
there's no time during the week to get the episodes in, but
yeah, you know, we're dedicated wheel.
Yeah, well, you mentioned the travel, I mean, this is Gardner
will be the sixth consecutive week that I've been on the road.
Or something. I just got back from a trip
where I was gone. Two weeks come back, I came
back. Today recorder two episodes.
I will reload my suitcase pack my gear and head out again on
Sunday. And then I think I have at least
a week off or I'm not going anywhere.
I help at least at this point. I need to ask your time to
recharge batteries and things like that recharge batteries and
see the Bears on your security camera and all that.
We had our first bear sighting of the season.
So yeah, they are back there in the hibernation is over in
Western North Carolina. Yeah, I forgot who said it but
somebody were so you and I were traveling together this week and
you were talking about the Bears and sometimes they do, they live
on your property, you know. I got no no, I think they're but
I wasn't convinced. They might live on your property
job. They might.
Yeah, they could and it's a pretty pretty wooded.
It's five acres. So I'm sure there's a lot of
nooks and crannies that they can probably dive into, I have not
gone exploring into it. So it's very it's very possible
that you know, One or more bears.
Conveyed with the property when I bought it, I think we should
do is get one of those old-fashioned honey pots and
like, leave it out in the backyard and see if like, like
Winnie the Pooh. Like you see, that's still there
and connect gasket, there's something like that.
Yeah, put a picnic basket out. I'll tell you what draws them is
bird feeders. So when bird feeders are out
they definitely will come out for that as we have learned the
difficult way last year. So I'm not sure how we're going
to tackle that this year, so it's beginning of conference
season. And and what are the other
conferences we love to frequent is the phyto authenticate
conference. The 2023 call for speakers is
now open through the end of the month.
So this episode will drop on the 20th.
That deadline is March 31st. Yeah.
So you know one thing I found just like kind of a hint for
anybody is like one way to get your company to pay for a
conference. Says view speaker.
And, you know, just knowing that actually find one of the most
interesting angles of conferences.
When you get the real world, stories of people who have, you
know, implemented, obviously it's great to hear about the
technology and all the buzz, but I remember there was one one
group of presentations in particular was like, Target
sales force. Or Sand City, all talking about
how they roll out password list. And it's like, well, this really
seems real now. So, you know, the whole password
list angle rolling that out for your customers, or rolling out
for the Enterprise. If you've done that, and you
have any interest in getting on stage and talking about it,
people either it up. I even up.
So, anyway, that's the deadline. Yeah, and I'll have a link in
our show notes for people to check it out the call for
speakers for authentic 8. T23, which will be in
California. I believe this year instead of
Seattle like the last couple years.
So another you know, another carrot there is if you if you
you know if you're a speaker and you can you know that helps
maybe get you out there and then you're going to a nice place for
weather perspective. So here's a question for you.
Jeff best Mexican food in the United States, San Diego.
I'll give you some options, San Diego.
Texas, which is more like Tex-Mex or dealer's choice you
guys some other answer. Well, I mean, Taco Bells
everywhere, right? Oh, bad.
Are you talking about last night?
It was horrible. I still enjoy a Taco Bell ruins.
Well, I'll tell you, I'm I'm not a professional on that side of
things but I do enjoy a place called Uncle Julio's in Chicago
area, so I'm not sure if I think it's probably more Tex-Mex or
not Tex-Mex more of calvary california-style.
I'll but that's my go-to place. I was just there last week and,
you know, my first night in have to have employed in.
I went to Uncle Julio with my brother and we had a nice nice
little taco dinner there. I missed it.
And I having you know, having that here in North Carolina I
can't even believe you told the Taco, Bell joke.
Hey, there's a lot of Taco Bell fans out there.
No no, I mean like a good taco bells, a good Taco Bell but I
decided on my way home from the airport.
Obviously it 10:30 at night. There's not much open.
I decided to go to Taco Bell sat in line for about a half an
hour. This is after basically working
all day and then traveling all night, I get up to the window,
get my food, get my beverage, my Pepsi, and he hands it to me and
it's warm. I guess, I feel as like, feels
warm, is there ice in here, we're out of ice.
I was on happy happy at all. And then the food was horrible,
man. It was like, I got a Crunch Wrap
and it was like 90% sour cream. And I like sour cream and all
but I didn't want like a big tortilla full of sour cream.
Well, that's what you get for going.
I guess late at night and not saying Taco Bell is the is the
Premier Choice. But yeah, because just so it is
with the correct answer. San Diego.
Well I'm just saying that. So take that, there you go,
there you go. Hey, we got a question from one
of our listeners Quaid Anderson and he asks, one of the
questions I have is how the identity.
How is identity changed since episode one?
This is what episode 2. So 4.
So, almost four years ago, are there things, you are
recommending then That now you are saying we have come a long
way. It's a good question nothing
comes to mind but I'll be honest I have not listened episode 1 in
a very long time. So I'm having sure what might
come out of that. I think you know the adage is of
I think we're talking about strategy and who has access to
what sort of things like that if you can make it out with a
really crappy microphones. And basement, Echo room that I
was broadcasting from but I don't think so.
Not fundamentally. Anyway, I think technology has
changed and we've seen things like SMS MFA become you know,
less of a focus, given the security challenges, run it,
it's still better than nothing but I think that now the push is
move too much stronger versions of multi-factor authentication
or in the case of password less things like that.
So I think technology has marched on and as more
capabilities have kind of come through I think it's just
matured maybe some of the recommendations so we say yeah
you should be using an fa you know five years ago.
It would have been yeah SMS that's sort of like the gold
standard because of X and now we've seen okay technology has
caught up with that as well as the attackers and you know the
benefits of that are still good but maybe they're less.
So just because it security applications around SMS.
Yeah. And I can't say that, you know,
I'm going to trace this back to exactly episode 1.
But there are a few Technologies.
And you hit it with SMS. That's one that comes to mind,
right? My thinking, you know, four or
five years ago was. Well, it's a heck of a lot
better than nothing and I still think that but I also think it's
slightly better than nothing. It's, you know, it's clearly not
if you're starting out. Now, why would you start out now
with with SMS? Yeah, yeah, skip that soccer
move on to something better. Or if you have SMS in place, you
should be thinking about replacing it.
So speaking of which, you know, one technology that I used to
talk to clients a lot, I felt like I was talking to clients a
lot about, but it's probably more than five years ago.
Was virtual directories. My opinion on Virtual directory
is like, it kind of covers up the problem.
The problem is your data is all over the place.
Your data is kind of a mess and you're just putting this virtual
directory in the middle to kind of like obscure the problem and
can let the problem continued rather than like forced the
proper solution. So that's one interesting.
Ya think? Go ahead?
No, I that is interesting because I feel the same way.
But now I'm back on to the band not bandwagon.
I'm still thinking about, if I want to jump on it back on
again, is maybe not necessarily virtual directory, but this idea
of like identity fabrics and security meshes and things like
that, I just I get what you're going with trying to, you know,
it may cover up, less than ideal data scenarios within an
organization. But sometimes those data
scenarios can't be fixed for any number of reasons or the lift is
too great. And maybe it just It does make
sense to bite the bullet and create you know and identity
Fabric or a virtual directory or something.
Similar on those lines. I'm not saying that that's the
you know, the way to solve all the problems but I feel like
you're totally right. It's like, yeah, it was kind of
popular way to approach it and then it kind of went away a
little while is, as there was this focus on, hey, fix the
data, right? Stop putting a Band-Aid over it.
And now, I think we're starting to see a little bit of a shift,
back towards things like, identity Fabrics, meshes things
like that, which Sony sound very similar to it too.
A meta or a virtual directory. When it comes to, you know,
combining data attributes of different sources.
Yeah. No, I think you're making a
great point. I think that, you know,
understanding, they'll cycle that we live in its I want the
functionality. Now, how can I make the
functionality work? Well, I can either do this layer
of abstraction and get The functionality want within some
acceptable time period or I can go back and clean up the problem
deliver no new functionality but have a better base to build from
for the future and then if I want the functionality is going
to be, you know, down the road from there or worse.
You can't even fix the problem. It's not your problem to fix
someone else asked to fix it. So now you're waiting on them.
The I am team doesn't always have controlled fix it.
You're right. But I don't think That defeatist
perspective, if you will is the right perspective to take.
Come on now man. The way you, the way, some of
our previous shows have gone down.
Her Jimmy has been now, you're saying you want to be on the
positive side? You've got to pick a lane, dude.
Hey, man, no, no, I can jump from Lane to Lane.
That's the beauty of the podcast is.
Most people don't listen to every single episode, like all
of you at all Jim changed. Now, he's mr.
Positive. Yeah, some do first, we
appreciate those folks. X.
Yeah, for sure. So yeah, one another.
I mean, undeniable trend has been this shift toward
cloud-based IM solution, so I think the cloud-based I am
Solutions on the access management side for years ago,
were pretty strong and there were a lot more on-prem
deployment still happening. I think now they're very few
folks that go out and roll out and on-prem access management
solution. Everybody's looking at a
cloud-based solution, but I think even like the IGA space
and Pam space and Hakeem space. It's like most new vendors are
starting in the cloud, most who are traditionally on-prem are
building Cloud version. So you know, probably four years
from now, it will be your own Option.
You know, it's funny. You bring that up because I was
thinking here, while we're talking like, you know, what has
changed? I think privileged access
management has changed. I think with a shift of the
cloud space is like, Keen Cloud infrastructure and title and
management and I'd any threat, detection, response, and sort of
all the stuff that's happened to Cloud.
A lot of that on-prem privileged access management may be,
starting to go away. I don't think it's gone.
I think there's still a very significant number, but as we
shift, more and more to sass based and As a service-based
infrastructures or platforms, do you really need on-premise, you
know, on-premise privileged access management as much as you
did for five years ago? If all your resources in the
cloud that are sensitive, should you be looking at, you know, the
newer versions of Pam, which I feel like our team and I TDR and
things like that. So that could be another way
again. Maturation of the idea of.
Yes, you should protect the keys to your Castle.
How you do it though? I think is I have shifted from
more of an on-prem problem, to a hybrid problem.
And at some point, I would think would be predominantly a cloud
problem solve for. Yeah, you're right.
I mean and the thing is that those solutions that are now
everywhere in our own tip of everyone's tongue, it's not like
there were invented within the last four years or that the
problem surfaced within the last four years.
But something like Infrastructure as code might
have been 10 15, 20 % of Enterprises doing it now.
It's 50 60 % everybody's doing automated deployment of their
infrastructure. Yeah, I think it another one
that I was really hot to trot for was you be a user Behavior,
analytics, and user identity Behavior, analytics.
Ueb a right. Whichever version you want to go
with. I don't think it took off the
way that I thought it would over the last couple of years.
Ears. I think it's now kind of evolved
somewhat into the itd. Are speyside.
Any threat detection and response and maybe that's okay,
right? Maybe it's maybe now is a better
time to look at that because we are using more cloud-based
Solutions and there is more prevalence of single sign-on
going through your access management platforms and things
like that. So I'm almost I Won't Say I'm
disappointed, but I thought that we would see more User Behavior
analytics type things. Driving more mature identity for
Enterprises and I don't know if I've seen that.
Yeah, no, I think that's that's a great point because I ueb a
space I thought was I thought that was here to stay and I
don't, you know, see anybody talking about it anymore.
So remember, when I said nothing and changed, I guess I just
don't like, we just get like four or five things.
Well, think about all this. The things that are coming, next
things like self Sovereign, eye candy.
I mean, to me, that's not the here.
And now I don't feel like I'm using my phone and the wall of
function of my phone to authenticate myself anywhere,
but I hear a lot of talk about it.
Pastor lives. I'm starting to see four years
ago. I don't think we're talking
about Pastor lives. I think.
Now, we're talking about us like, You know why would you
roll out some new functionality for a self-service password?
Reset mom, maybe it's just part of your Microsoft so you have it
for resetting, your Azure password, which maybe is the
main password that you using for most of your Enterprise
applications. But for the most part we're
thinking, okay, well how do you get to True password list?
So like those are think it's, I think it's it's shift its
shifted from didn't exist to if it comes.
And now, I think we're in the when it comes face like it's
coming. How quickly will we get there?
I think, is the stage that we're in right now?
Yeah. Well, the soft Sovereign
identity. I'm, I think it's so nasty.
Sorry. Yeah, for pastoralist.
I think, for self-serving identity, it still.
Is it going to come? I feel like there's got to be
some kind of digital. Oil replacement for physical ID
cards. I think it'll be driven by
government Education, Health, or Finance, one of those sectors
and maybe all four are going to band together and kind of figure
out this thing and come up with with a solution, that makes
sense. That most people will look to
adopt driver's license. A great one.
I'd love to have my driver's license digital.
I think you guys have it in Georgia, right?
Is that an option? I don't have it but I think and
I I like to keep my notes on paper.
This is true, right? Like people like well can you
put that on team? So I take a picture and I upload
the picture two teams. Yeah so one of the other things
that we wanted to mention is a company named work, had a state
of identity report that they publish on the internet.
Every can go out and find it. We'll put a link in the show
notes but Jeff, what's an ort? It is a cosmic or astronomical
thing I do. I'm not the expert on it, but
it's basically the area past Neptune past the heliosphere and
like this area in between other galaxies and things like that is
the best way that I can think about it, but I'm sure I'll get
roasted on Twitter LinkedIn or something.
Someone telling me, you know, the correct one.
I when I literally just want to bang on it.
Yeah, that's that. I'm like, okay, I get where it
is now. For a picture and that's kind of
my explanation. Yeah, maybe we'll we'll pull in
somebody from word to some point.
They can explain it to us better like FR, our that listeners that
far out. That'd be great.
I remember when I learned what an OCTA was.
So OCTA is basically the measurement or a way to
represent cloud cover. So, I think it's An octet.
So that would be like, 8, different wedges of a circle or,
you know, I'm not explaining it well but they're, you know, from
cloud cover perspective, you could be 0% clouds to 100%
clouds, that would be an 80 would be a zero and then it's 18
in 1/8 increments. How anyway, I thought that was
really cool because I didn't even know about that
measurement. I learned about it and OCTA at
the same time, not as a pretty cool name.
Right now, I'm added eight out of eight.
We have 100% cloud cover right now for those wondering.
Yeah, same here. So the the state of identity
report was pretty cool. I mean, you know, so looking at
it right on the Fly? It's number one Enterprises lack
strong, MFA adoption. I don't know meet a lot of the
Enterprises that I'm working with.
Actually have a lot of MFA adoption at least getting
through the front door. So might be talking about here
kind of the breadth of the MFA adoption or maybe the key is the
word strong. So made against the key.
I think it means your own. Yeah.
Weaker MFA, doesn't count as much, you know.
I think the best is to use an authenticator app.
I think that Get the authenticator app with the
number matching, so kind of that extra step of actually have to
go into the app and type. The number that showing up that
prevents, that MFA fatigue attack where you just keep
pounding the person until they say, yes, I approve.
Stop sending something to my phone.
I don't think it does. I think it's the same thing.
You're basically getting a prompt on your phone.
It says, pick your three numbers, which one is the right
one? And you think people think pick
one of those numbers? Eventually, if they're if
they're typing in a code, they're going to pick a number
because it's even easier. You don't have type A that you
just touch it and you've authorized it.
No. But I think like like the push
authentications would just say yes or no by default.
So you by default but number matching adds a number to the
screen so it's not just yes or no.
It's in addition to yes or no. The yes or no is implied.
It is, which is the right number.
I've got three numbers 1746, 38 and my browser shows the right.
One way my phone have to pick the right.
So the attacker has to browser. The legitimate user has the
number. They have three numbers in front
of them through number. They might pick the right one by
mistake. It's possible.
Especially since there's only
three, and it's better than many other version.
If somebody does that bad, bad bad, bad kisser, I smell
security awareness training for that individual come Monday
morning or whatever that. Yes, exactly.
Well, if the company is not sunk by them ROM.
Okay. So, second one was dormant
accounts. In the crosshairs, the idea that
attackers are You can advantage of dormant accounts as their
method for getting in. There's definitely dormant
accounts. I think that one of the things I
see with clients is they do a pretty good job of getting
active directory accounts enabled, disabled, but do less
of a good job in terms of disabling accounts in
applications. Now, usually the defense in
depth or where the compensating control, is that you can't get
him without, you know, authenticating to active
directory. So I'm kind of split on this
one. It I think it's important but I
don't know that it would be a major attack Vector.
What do you think I answered? It's a potential open door.
And if you're in numerating a Target that you're trying to
breach the number of open doors, the number of potential open
doors is in your Ever. That's what you want to me like
this, you know this thing of okay.
Yeah. Dormant accounts are in the
crosshairs that for my mind is I very no, no s Sherlock type
scenarios. Like yes.
Of course we were trying to get those accounts.
Should they be cleaning up? Yes.
Do they do a good job of it varies?
I think a lot of organizations rely on well to kick in the
front door, that's our control. Well, what happens if they're
already in the front door and you didn't clean up the account
in sap or or workday or any of these other, you know, highly
privileged systems, right? They have a lot of data in them.
Well, guess what? Didn't matter did it that you
shut down the active directory account.
They got in some other way and then they you know they they
laterally moved up and over until they got to what they
wanted. Great Point.
Okay. So the third and final was
admins and Executives under attack so I guess spearfishing
targeted attacks against domain administrators I would look most
organizations do a pretty run a pretty tight ship in terms of
like making sure that domain admins is the limited group
using accounts that are not the Everyday, Use accounts is still
best practice because I think getting fished with your admin
account is would be horrible. It would just be bad. um, So I
yeah, I think, I think this is like, this pretty good
information. What do you think?
I think it's good information. I don't think it's new
information. Perfect.
Of course, they're targeting administrators who have the
access that they need and they're targeting the
executives. That's not news.
I think, you know, I'm interested to get into it
further. Maybe we get somebody on from
work to kind of take us through it.
They think it comes down to the details, right?
What specifically are we looking at?
What is the specific threat? How is it happening?
What are things that you know we as people in the identity space
can take back to you know our organizations to better protect
ourselves or to drive awareness towards.
I think that's that's where I would like to see it.
Take it. So if you're listening from ort,
reach out to us on LinkedIn, would love someone to come on
the show and kind of Step us through the report and kind of
talk about an into more detail. Yeah, the only thing I'm going
to say it's like as a defense of this is that you keep seeing
presentation for like most the top form of packets.
Fishing social engineering if you two clades excellent.
Question earlier what's changed is not that testing the same
answer for the last 10, 15 years, social engineering and
fishing. So some things like they might
be no, es Sherlock but okay. Well, you know, it doesn't make
it any less route. We're gonna have a creative new
answer better. Damn, well, better be right?
Right. So anyway, I'm going to Gartner
next week, man. Are you excited?
Theoretically, we're already here if you're listening to this
somewhere somewhere in the holes of the of the the Gaylord Texan.
I've never been there before. So I hear its massive.
But yeah, somewhere we are at Gartner.
Yeah, I'm going to be wearing my fanciest new clothes.
No boy, gimme you stand out in a crowd.
That is for sure. Yeah, I make sure I do.
So any sessions that are peaking your interest.
Well there's one that is definitely piquing my interest,
the one that we're doing at noon on Tuesday the identity at the
center podcast goes, inside the belly of the Gartner, I am Beast
basically we got 30 minutes. We're going to try and do an
action packed quickfire Show podcast style format on stage
with Henry, K and Becky and really get into it.
The idea is to put them on on the spot to answer questions
that they don't normally have to answer.
Sir and hopefully good time. So definitely that one Shameless
promotion. But you know, what can I say
something about that? So people have been losing this
podcast long enough, probably through osmosis or maybe
explicitly? No, we don't.
We don't have any interviews where it's like, gotcha.
You made that? We're trying to make our guests
look stupid. No, we in fact we tell our
guests like this isn't Meet the Press.
You know? It's we all want to sound smart.
We want to have information that educates, people were listening
but we also want to be entertaining.
It's not a got your for for gardeners and some of these
questions are pretty tough questions.
And well we got some of them, we came up with some came from
listeners. We're going to give credit where
where we are authorized to do. So some might be anonymous was,
you know, listeners or whatever. But yeah, I'm I'm pleased with
the way with with the content. My fear is will we get through
it. We only have 30 minutes and, you
know, sneak peek. We have a shot clock at the
bottom of every slide, which has the questions on it to try and
keep us moving. In and moving through your
moving through the show as quickly as I can, but I'm sure
it'll go. Well, if you're in the area,
stop by noon, wherever we happen to be come watch us.
Do basically a podcast live. I'm green stickers.
Oh, yeah. And yeah.
And Jim has stickers wall stickers.
So you want to come up after we're done speaking and grab a
sticker. Please do.
Yeah, outside of that, I am, as I mentioned before, things
around fabrics and meshes, I think I'm going to try and jump
into those and see what is new in those areas because I'm
starting to see some of the value especially with
distributed data sources in some, pretty complex
organizations looking to solve something, especially on the on
the customer or consumer side of I am.
I think there's some value there and want to Bone up a little bit
on that. So, that's, that's what I'm
looking at. And then, of course, the
networking, In the event that we're good.
We got go on Tuesday night. One track that really interest
me which is I am program management and there's one
session which I love the title as the expert measuring the
business value of identity and access management.
I really think this is so important, I think that even if
you kind of come from the perspective that we don't need
to sell our Executives on, I am there to get the value like well
challenge yourself. So then, what is the return on
investment that you're going to deliver to the business through
your IM initiatives and then live it?
Like you know, if you get that money and you promised to return
measure yourself. So I'm hoping that a session
like that really hits it hard. It's over by Paul Proctor.
I don't know. Paul distinguish VP analyst from
Gartner but I'm really interested in Diving into that
or listening about that topic in a way to hone your message to
great way to hone your message. So the other thing is, I mean,
if you're listening to this on Monday or Tuesday morning and
you're running to Jeff Rye, we may still have a few seats
available for our networking event.
It's at Corky's gaming Bistro was going to be A boatload of
fun. Just come off to us if we have
some openings left, I mean, the reason why we're being so
judicious with the openings is that they actually do have a cap
of how many people they can fit into the place.
And I'm just very conservative want to invite more people than
they'll let in and then have people turned away at the door.
So we're going to stay under that, that fire limit.
How many people can fit into the place.
And we're going to copy room to throw axes.
I mean how I suppose the rocks of the place is jam-packed,
right? It's yeah.
It's going to make you sign a waiver by the way but hopefully
will like we don't have to depend on the waiver because we
don't want anybody getting injured by the axis.
Don't get hurt. But yeah, if you see us, you
know, come up introduce yourselves.
We're happy to chat but that's gonna be cool event.
It's our first-ever identity. At the center community, meet
up. It's being sponsored by our SM
OCTA and One Cosmo so definitely thanks to them.
They are the ones footing the bill.
I think as you know people may or may not be aware, the podcast
is literally just the two of us and we do this on the side
outside of our day job. So to get, you know,
organizations like that, you know, Believe in Us and trust us
and sponsor us, you know, for that kind of thing is very cool.
So we definitely appreciate those three companies chip it in
ya. All the other thing is like, we
love our listeners Jeff but, you know, we're not splitting that
bill between you and me, man, that's that's pretty hefty bill.
So yeah, I just, I got a box here.
I have a new of new microphones that those are not cheap.
Yeah, yeah. Well I guess stickers, gasps
stickers. So anyway, any predictions for
the conference chef I don't know yet.
I feel like I have a better idea after the first day but I think
it's going to be a good conference.
I'm very impressed by the just the sheer quantity of topics
that are out there. I'm looking at my conference
Navigator and the things that I've signed up for and I have
multiple like overlapping. Like I wish there was like four
things taking place at the same time.
I wish I could go to all of them.
So there's gonna be hard choices to make, as to, which ones I,
you know, actually, you know, stick in and Things like that
but I don't know. I think I think I'll lead the
predictions to you because I don't know if I have any good
ones right now other than I think we're gonna have a good
time. Yeah.
So my one prediction is that I'm going to end up with meeting
five people during the conference who will be guests on
the show within the next 12 months.
That's predicts good. Okay.
Yeah. Okay.
The other prediction is all eat. 10 desserts over the course, the
over-under is 10 for desserts, for for Jim in.
Basically two nights right? Because you're leaving on
Wednesday. So you're not gonna be there
Wednesday night. Right?
It's just two nights. I would take the under folks.
Now, if it was me, I'm going to be there, Monday, Tuesday, and
Wednesday, and I do. Enjoy my desserts.
So, yeah. I like it.
I like a good dessert too. Yeah.
Yeah, I don't know if I have any other like Gartner predictions
and, you know, hopefully people, you know, come up.
We always like to meet listeners and stuff like that.
That would be cool to meet folks out there and and stuff.
So, one thing I'm going to say so for people who are going, if
you are Up for some fun, Becky archambault who is the one of
the animals from gardeners. Don't be on the panel of Jeff
and I is a big Buffalo Bills fan and they got their man and um I
don't do this to her. I'm doing it, I'm doing it.
So just go over give her a hard time r as r a little bit because
I didn't realize like we, we talked about like razzing her on
stage about it, just thought like okay well it's an old
wound. At this point, it's probably not
that interesting for most people.
But if you're an NFL fan anyway, she takes a very, very secretly
like even though it's an old wound, it was like pouring salt
in it. Yeah.
Well, some inside news right, that we did have a question that
was in our, in our outline of asking Becky to provided Gartner
analysis of the Buffalo Bills loss in the playoffs.
We left it on the Cutting Room floor for time.
I'm so proud of you, we were going to bring it honor.
If you spray it on, I'm sure she would appreciate that.
A bunch of people walking up to her asking her.
Why the bills underperformed. Let's just say in the playoffs.
Be nice, be respectful. Come on guys, what else
anything? That's it, that's it.
It got any, underrated him. What's an underrated travel?
Hacker tip for people out there. Something you do that is like
this is a this is a Jimmy Mac thing.
I hope that you just don't even act thing.
I think it's the thing that a lot of people do which is You
get like some kind of like insulated bottle and like fill
it with water. Don't go in the airplane without
your own water because it's like they might hit turbulence and
not serve water or whatever, or drinks and they hydrated, what's
that stay hydrated? Basic hydrated.
That's You know, I always like, here's okay, here's a tip.
So I was flying back from Canada like two weeks ago.
I had a middle seat on the back of the plane.
I'd say one Saving Grace. First off the, the seat didn't
recline back. I mean, it was just the worst
seat on the airplane and I had like, I bought myself to meals.
So I just like I just was like, all right, well I'm going to
have a bunch of meals in a bunch of food on this plane.
And, you know, I had like some entertainment on my phone, some
podcasts and some things to watch and actually didn't turn
out to be nearly as bad. Because of those moves right
there. Entertainment and food that's
it. Okay.
What are your tips? Really small stuff like one,
don't overpack. I see a lot of people carry a
bunch of crap with them but they'll never use travel light.
Get a, get a bag or backpack. That has a trolley sleeve.
That will save your back so much, especially if you're just
kind of stand around waiting for planes and things like that.
So a lot of people were just carrying shoulder bags and stuff
like that and how they do that but that's a must have on my bag
collection. And get clear, get TSA PreCheck,
get a airline Club if you travel at all.
I mean all that stuff makes it so much easier you know, to have
a decent travel experience. I won't say great but little
stuff like that can add up to a somewhat decent experience.
Yeah, per user must have. I mean anybody who's traveling a
few times a year, should get TSA Pre.
I don't know about clear. It's a lot of money and some are
even hotter. 150, you might get a discount through your airline
status or through credit card. When you you wish you'll have
it. And again, if you do any type of
travel, I think it's spend a little money to make make travel
easier, makes travel easier near the Uber of tip, for traveling
is remember in your mind. Nobody's really happy about
being there. Nobody's enjoying the hot plane
or the middle C or whatever, you know, don't make it all about,
you don't get - and be rude towards other people and just
try to be a good positive person.
It's be a decent human being. That's it.
There's a there's a protraction. Alright, let's go ahead and wrap
it up there. Looking forward to seeing Folks
at Gartner. You can find us on the web
identity at the center.com. We're on Twitter idea.
See podcasts mastodons and idea, see podcast at infosec, got
exchanged hit us up on LinkedIn. We're always happy to meet.
And their conversations and yeah, don't forget to like,
subscribe to all that stuff. That's how you can help us and
get the word out. So we'll go and leave it there
for this week. Jim.
Anything else? What's a mess of on?
Boy. All right, we'll talk everyone
later. You've been listening to
Identity at the center. We hope you've enjoyed the show,
make sure to like, rate and review and we'll be back soon,
but in the meantime, hit the website at identity at the
center. Are.com and find us on Twitter
at, idac podcast. See you next time on identity at
the center, Are.com and find us on Twitter at, idac podcast.
See you next time on identity at the center,